csp-middleware v1.0.0

Major Changes

• Generate a request nonce and matching Content Security Policy with csp() before render(): (#12098)

  import { createRouter } from 'remix/router'
  import { csp } from 'remix/middleware/csp'
  import { render } from 'remix/middleware/render'
  
  let router = createRouter({
    middleware: [
      csp({
        policy: ({ nonce }) => ({
          scriptSrc: [`'nonce-${nonce}'`],
          styleSrc: [`'nonce-${nonce}'`],
        }),
      }),
      render(),
    ],
  })

  Generated resources receive the nonce automatically; authored tags use getCspNonce(context). See the CSP middleware docs for setup, report-only policies, and reporting.

Patch Changes

• Bumped @remix-run/* dependencies:
  • headers@1.1.0